5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd | Triage

Sharing

General

Target

7abb61412a064ced52fb6174352501d8_JaffaCakes118
Size

277KB
Sample

240527-17ybgsdb43
MD5

7abb61412a064ced52fb6174352501d8
SHA1

51b2967bcbfb38ab1059eadf275b64fe9e0eedeb
SHA256

5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd
SHA512

1ec6410bd09c081b6df36d27f101fcb60b870014fff09e2b3dd62107b5e2fa4f5cdb6213f5413d72abbdcc511f9b952229b39c5c5d9cc43b9625c485ecdee018
SSDEEP

6144:6xcrt7MGD4ekzeBIpV51pK0Yemmuf7Gsgr:6Ot7n4ekzF51g0YGuf7GNr

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  7abb61412a064ced52fb6174352501d8_JaffaCakes118
- Size
  
  277KB
- MD5
  
  7abb61412a064ced52fb6174352501d8
- SHA1
  
  51b2967bcbfb38ab1059eadf275b64fe9e0eedeb
- SHA256
  
  5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd
- SHA512
  
  1ec6410bd09c081b6df36d27f101fcb60b870014fff09e2b3dd62107b5e2fa4f5cdb6213f5413d72abbdcc511f9b952229b39c5c5d9cc43b9625c485ecdee018
- SSDEEP
  
  6144:6xcrt7MGD4ekzeBIpV51pK0Yemmuf7Gsgr:6Ot7n4ekzF51g0YGuf7GNr
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2